Privacy policy

1. Who we are

LazyLister is run by Vinted Resells Ltd, a company registered in England and Wales under company number 16344052, with its registered office at [REGISTERED OFFICE ADDRESS]. We are the controller of your personal data, which means we decide how and why it is used.

If you have any questions about your data, email [email protected].

2. What we collect

• Account details: your name, email address and login details.
• Plan and payment details: your plan, your billing history, and the card type, last four digits and expiry date that Stripe shares with us. Stripe handles your full card details. We never see or store them.
• What you put in: photos, item details, supplier details, buyer messages, listing text and anything else you give your employees, plus the results they generate.
• Usage and device data: how you use LazyLister, log records, your IP address, and your browser and device type.
• Messages: anything you send us, such as support emails.

Please only put other people's personal data into LazyLister when you need to, for example a buyer's message you want help replying to, and when you have the right to share it.

3. How we use it, and why we're allowed to

• To create your account, give you the employees in your plan and generate your results. Reason: to perform our contract with you.
• To take payments, manage renewals, and send receipts and renewal reminders. Reason: our contract with you, and our legal duty to keep tax records.
• To answer your support requests and complaints. Reason: our contract with you, and our legitimate interest in helping our customers.
• To keep LazyLister secure, prevent fraud and abuse, and apply fair use limits. Reason: our legitimate interest in protecting our service and users.
• To understand how LazyLister is used so we can improve it. Reason: your consent where this uses analytics cookies, otherwise our legitimate interest in improving our service.
• To send you news and offers about LazyLister and VintedResells, only if you have agreed, or if you are a customer and haven't opted out. Every email has an unsubscribe link. Reason: your consent, or our legitimate interest in marketing to existing customers.
• To comply with the law, including tax and accounting rules. Reason: legal obligation.

4. How the AI works with your data

When you use an employee, what you submit is sent to our AI provider so it can generate your result. We only use AI providers who agree not to use your content to train their models.

LazyLister does not make decisions about you that have legal or similarly significant effects. Its results are suggestions for you to review, and you decide what to do with them.

5. Who we share it with

We never sell your personal data. We share it only with providers that help us run LazyLister, under contracts that require them to protect it and use it only on our instructions:

• Stripe, which processes payments;
• our AI provider, currently Anthropic, which generates results;
• our hosting provider, currently Netlify, which runs our website and app; and
• our email and analytics providers.

We may also share data with our professional advisers, with authorities where the law requires it, and with a buyer or successor if we sell or restructure our business, in which case we'll tell you.

6. Transfers outside the UK

Some of our providers are based in, or access data from, outside the UK, including the United States. When that happens, we make sure appropriate protections are in place, such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or the UK Extension to the EU-US Data Privacy Framework. Email us if you'd like more detail.

7. How long we keep it

• Your account and your content: for as long as your account is open. When you close your account, we delete or anonymise this data within 90 days, unless we need to keep something for a reason below.
• Payment and tax records: 6 years, as UK tax law requires.
• Support messages: up to 2 years after the conversation ends.
• Security logs: up to 12 months.

8. Your rights

Under UK data protection law, you have the right to:

• get a copy of the personal data we hold about you;
• ask us to correct data that is wrong or incomplete;
• ask us to delete your data;
• ask us to limit how we use your data;
• object to us using your data, including for marketing at any time;
• receive your data in a portable format; and
• withdraw your consent at any time, where we rely on it.

To use any of these rights, email [email protected]. It's free, and we'll reply within one month.

You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We'd appreciate the chance to sort things out with you first.

9. Cookies

We use essential cookies to log you in and keep LazyLister secure. These are needed for the service to work, so they don't need your consent.

We only use analytics cookies if you agree to them through our cookie banner, and you can change your choice at any time. Stripe may also set cookies during checkout to prevent fraud.

10. Children

LazyLister is not intended for children under 13, and we don't knowingly collect their data. Users under 18 need permission from a parent or guardian, as our Terms of service explain.

11. Keeping your data safe

We protect your data with encrypted connections, access controls and trusted providers. No system is completely secure, so if you think something is wrong with your account, please tell us straight away.

12. Changes to this policy

We may update this policy from time to time. If we make important changes, we'll tell you by email or in your account before they take effect.